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DETAILED ACTION 
Claim Rejections - 35 USC § 102 

1. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by another filed 
in the United States before the invention by the applicant for patent or (2) a patent granted on an application for 
patent by another filed in the United States before the invention by the applicant for patent, except that an 
international application filed under the treaty defined in section 351(a) shall have the effects for purposes of this 
subsection of an application filed in the United States only if the international application designated the United 
States and was published under Article 21 (2) of such treaty in the English language. 

2. Claims 1, 3-4, 6-17, 19 are rejected under 35 U.S.C. 102(e) as being anticipated by 
Khazan (US Pub. No. 20050108562 Al). 

As to claim 12, Khazan discloses (fig. 4A; [0040]) shows a malicious code detection 
device (1 10) including: an intercept module (1 14; [0073]); an analyzer module (104-108; [0076]) 
coupled to the intercept module (114); a request database (see figs. 1, 4A) coupled to the 
analyzer module (114; [0032]); and a standards list (106) coupled to the analyzer module (108; 
see [0040[0072; 0078]. 

As to claims 13-14, Khazan discloses a malicious code detection device comprising an 
inclusion profile list (1 12) coupled to the analyzer module (104-108). 

As to claims 15-16, Khazan discloses a malicious code detection device, further 
comprising a memory (data storage system 12) area coupled to the intercept module (114) and 
the analyzer module (see [0072]); and, wherein the intercept module (114) includes an 
interception mechanism for intercepting a request ([0073]). 

As to claims 1 and 17, Khazan (figs. 1, 4A) discloses a method including stalling a 
request (fig. 1 shows a data storage system 12 for holding a request; see [0032]); and 
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determining whether the request is suspicious, wherein upon a determination that the 
request is suspicious, determining whether malicious code activity is detected based upon the 
request ([00120]). 

As to claims 3 and 19, the claims differ from claim 1 by the additional limitations 
"wherein upon a determination that the request is suspicious, adding a request entry 
representative of the request to a request database, and determining whether malicious code 
activity is detected on the host computer system based upon the request entry." However, the 
limitations are clearly disclosed by Khazan (fig. 11; [0102-0103]). 

As to claims 4, 6 and 8, Khazan discloses a method, further releasing the request upon a 
determination that the request is not suspicious (fig. 8; [0094]). 

As to claim 7, method claim 7 corresponds to apparatus claims 12-14; therefore, it is 
analyzed as previously discussed in claims 12-14 above. 

As to claim 9-11, Khazan discloses a method, wherein the request is an HTTP GET 
request; and, wherein the intercepting a request on a host computer system occurs at the 
application level ([0036; 0045]). 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

4. Claims 2, 5, 18 and 20 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Khazan in view of Bates (U.S. Pat. No. 6,785,732). 



Application/Control Number: 1 0/633,907 Page 4 

Art Unit: 2133 

As to claims 2, 5, 18 and 20, Khazan does not explicitly disclose a method, which 
generates a notification that malicious code activity is detected; and implements one or more 
protective actions. 

However, in the same field of endeavor, Bates discloses a computer system including a 
virus checker, which generates a notification that malicious code activity is detected; and 
implements one or more protective actions (col. 6, lines 21-38). 

Therefore, it would have been obvious to a person of ordinary skill in the art at the time 
of the invention to combine Khazan' s malicious code detection technique with the virus checker 
system, as disclosed by Bates. By doing so, senders of viruses are notified when a web server 
detects a virus, thus helping to inhibit the proliferation of the virus (col. 2, lines 51-56). 

Conclusion 

5. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. See PTO-892 

Any response to this action should be mailed to: 
Commissioner of Patents and Trademarks, Washington, D.C. 20231 
or faxed to: (703) 872-9306 for all formal communications. 

Hand-delivered responses should be brought to Crystal Park II, 2121 Crystal Drive, 
Arlington, VA, Fourth Floor (Receptionist). 

6. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Fritz Alphonse, whose telephone number is (571) 272-3813. The 
examiner can normally be reached on M-F, 8:30-6:00, Alt. Mondays off. 



Application/Control Number: 10/633,907 



Page 5 



Art Unit: 2133 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Albert De Cady, can be reached at (571) 272-3819. 

Any inquiry of a general nature or relating to the status of this application or proceeding 
should be directed to the Group receptionist whose telephone number is (571) 272-3824. 

Information regarding the status of an application may also be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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